There is an RFC though, title is something like "Upgrading to TLS within HTTP". This is HTTP's analogue to SMTP/FTP/etc.'s START_TLS protocol option.
Cheers.